Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: Q3WiGrJzDp97etivgdtrSuVtm5Q6ORofxxj9ae2R/5Y=
Subject key identifier: C1:7B:38:CD:62:BA:FB:82:FF:E8:E2:40:91:A2:71:8C:9B:BD:B8:AE
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019643D71D7A935E2DBD034A599773CB42FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 13:01:32 +0000
Manifest this update: Thu 17 Apr 2025 13:01:32 +0000
Manifest next update: Fri 18 Apr 2025 13:01:32 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: 5f9aB/Szte1VWIseL2bDxjTmdUH4wlMTo99/5BKdxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:1d:7a:93:5e:2d:bd:03:4a:59:97:73:cb:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Apr 17 13:01:32 2025 GMT
Not After : Apr 18 13:01:32 2025 GMT
Subject: CN=c17b38cd62bafb82ffe8e24091a2718c9bbdb8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:de:a3:cc:fb:da:a5:7e:dd:1e:9d:da:a2:
de:e5:b0:34:3e:be:12:86:c9:bd:ce:93:bc:e4:d6:
3c:9d:49:ce:79:2d:4d:56:dc:80:d4:01:cb:50:b0:
e4:bf:9a:65:f6:bb:35:ff:36:e3:de:bb:8e:52:d7:
ce:8b:7e:99:16:f2:da:e2:ac:eb:51:fe:9f:2a:42:
e7:3b:56:d7:d2:d2:76:d1:ac:e8:e4:b6:27:a6:c6:
f4:5b:17:0d:fc:b3:c0:e9:ea:db:17:46:6a:e7:05:
42:7a:6c:0d:e9:b0:da:8d:fc:a6:c2:73:26:83:bd:
91:a4:4e:46:7e:a5:d6:5e:2a:3a:c9:23:fb:69:53:
e1:91:a8:52:b4:a5:9f:de:d5:c5:20:c7:24:15:0b:
a8:8e:f7:32:7b:44:db:ab:e3:9d:41:78:0c:35:9b:
29:a4:55:1b:61:5c:fd:b8:08:f8:ab:bf:64:f6:69:
2a:55:58:c0:26:d1:22:24:75:57:7f:bb:52:0c:a9:
9b:81:9b:a1:54:06:69:14:72:cb:3a:dc:55:a1:dd:
99:aa:ee:51:fa:e1:16:fd:68:bb:3a:72:64:c7:85:
6f:50:d4:7a:85:dd:4d:a2:4a:cf:a0:eb:1c:19:b4:
6d:f6:5c:22:3a:88:43:a2:00:88:88:38:ce:d1:a5:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:38:CD:62:BA:FB:82:FF:E8:E2:40:91:A2:71:8C:9B:BD:B8:AE
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:21:91:ee:d6:96:2d:f8:56:14:5b:7b:c6:42:f9:b0:62:6d:
54:8b:70:9a:6f:79:9c:8c:a7:b8:b6:28:c6:88:c2:98:b4:2d:
f0:d3:00:93:1d:41:49:d3:3b:bb:c9:02:45:08:16:09:fa:11:
e7:9f:ae:3c:7c:96:c8:0c:a5:61:a5:be:d3:d0:a9:a5:29:c6:
9c:5a:30:a9:9f:3a:fc:19:15:6a:c9:d7:6c:af:86:e9:da:42:
65:da:98:4c:4a:9c:d0:2b:5e:11:ea:0b:0d:c7:9c:bd:07:26:
ff:56:3b:e4:08:8f:a0:d7:35:96:c9:99:43:4d:86:95:38:99:
b4:40:70:cb:9a:6e:75:f5:89:df:d5:e4:5a:cc:08:64:34:9a:
1d:44:0a:53:f4:37:69:ec:4a:23:d3:24:cc:92:aa:46:c7:ab:
90:8c:79:d2:8c:d4:b9:77:39:c1:47:8e:88:a5:c2:c7:1c:44:
ed:c6:90:fd:c7:d4:21:94:ea:15:1e:04:67:bf:69:cd:3c:ce:
e4:bb:7e:a5:e9:59:9a:c1:61:39:71:e8:59:de:63:02:4d:ca:
9e:87:35:31:2b:a4:1f:9c:37:66:aa:26:ac:73:bf:c0:1c:54:
df:bd:0f:ef:46:56:7f:75:8e:78:a4:35:68:19:20:51:c6:54:
07:fc:05:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1x16k14tvQNKWZdzy0L7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODRhOWRiZTYzMTBkN2JmYWU4MzhiYTIyZmEwNDcxMjZi
NTU0NTgwHhcNMjUwNDE3MTMwMTMyWhcNMjUwNDE4MTMwMTMyWjAzMTEwLwYDVQQD
EyhjMTdiMzhjZDYyYmFmYjgyZmZlOGUyNDA5MWEyNzE4YzliYmRiOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nfeo8z72qV+3R6d2qLe5bA0Pr4S
hsm9zpO85NY8nUnOeS1NVtyA1AHLULDkv5pl9rs1/zbj3ruOUtfOi36ZFvLa4qzr
Uf6fKkLnO1bX0tJ20azo5LYnpsb0WxcN/LPA6erbF0Zq5wVCemwN6bDajfymwnMm
g72RpE5GfqXWXio6ySP7aVPhkahStKWf3tXFIMckFQuojvcye0Tbq+OdQXgMNZsp
pFUbYVz9uAj4q79k9mkqVVjAJtEiJHVXf7tSDKmbgZuhVAZpFHLLOtxVod2Zqu5R
+uEW/Wi7OnJkx4VvUNR6hd1NokrPoOscGbRt9lwiOohDogCIiDjO0aX5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF7OM1iuvuC/+jiQJGicYybvbiuMB8GA1UdIwQY
MBaAFAuEqdvmMQ17+ug4uiL6BHEmtVRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTkt
YTg1ZGRlMjE0NWVhLzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTktYTg1ZGRlMjE0NWVh
LzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyGR7taW
LfhWFFt7xkL5sGJtVItwmm95nIynuLYoxojCmLQt8NMAkx1BSdM7u8kCRQgWCfoR
55+uPHyWyAylYaW+09CppSnGnFowqZ86/BkVasnXbK+G6dpCZdqYTEqc0CteEeoL
DcecvQcm/1Y75AiPoNc1lsmZQ02GlTiZtEBwy5pudfWJ39XkWswIZDSaHUQKU/Q3
aexKI9MkzJKqRserkIx50ozUuXc5wUeOiKXCxxxE7caQ/cfUIZTqFR4EZ79pzTzO
5Lt+pelZmsFhOXHoWd5jAk3Knoc1MSukH5w3ZqomrHO/wBxU370P70ZWf3WOeKQ1
aBkgUcZUB/wF0Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:23 2025 by rpki-client